Back to CVE records
Medium 5.5Published May 27, 2026
CVE-2026-46005xfs: fix a resource leak in xfs_alloc_buftarg()
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: xfs: fix a resource leak in xfs_alloc_buftarg() In the error path, call fs_put_dax() to drop the DAX device reference.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Jun 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 6f643c57d57c56d4677bc05f1fca2ef3f249797c before ed2d6442e61169e565727ba15c4f6a0cb5ce16df; from 6f643c57d57c56d4677bc05f1fca2ef3f249797c before 82fb9da6477d08bdab954dc7bc081a41f2f9cae6; from 6f643c57d57c56d4677bc05f1fca2ef3f249797c before 28a6c132b8c6e5eeefa889c4fb43d65b12989d48; 6f643c57d57c56d4677bc05f1fca2ef3f249797c builds before 5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9; from 6f643c57d57c56d4677bc05f1fca2ef3f249797c before 5804cb507233ed767a83ac70527b2f6c4566ec75; from 6f643c57d57c56d4677bc05f1fca2ef3f249797c before 29a7b2614357393b176ef06ba5bc3ff5afc8df69 | CNA record |
linux linux_kernel linux:linux_kernel | from 6.0 before 6.6.140; from 6.7 before 6.12.86; from 6.13 before 6.18.27; from 6.19 before 7.0.4 | NVD |
References
- https://git.kernel.org/stable/c/ed2d6442e61169e565727ba15c4f6a0cb5ce16df
- https://git.kernel.org/stable/c/82fb9da6477d08bdab954dc7bc081a41f2f9cae6patch
- https://git.kernel.org/stable/c/28a6c132b8c6e5eeefa889c4fb43d65b12989d48patch
- https://git.kernel.org/stable/c/5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9patch
- https://git.kernel.org/stable/c/5804cb507233ed767a83ac70527b2f6c4566ec75patch
- https://git.kernel.org/stable/c/29a7b2614357393b176ef06ba5bc3ff5afc8df69patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.